# changelog

author: Sandro <devel@penguinpee.nl> - 1.3.8-1
changelog:
  - Update to 1.3.8 (RHBZ#2391767)
  - Apply patch for compatibility with NumPy >= 2.3.0
  - Close RHBZ#2385504


author: Packit <hello@packit.dev> - 0.56.0-1
changelog:
  - Tmt documentation has been extended. (#937)
  - Support for forgejo commit statuses has been added. (#936)
  - The package ogr/abstract has been split into multiple files. (#935)
  - Resolves: rhbz#2389723


author: Packit <hello@packit.dev> - 0.56.1-1
changelog:
  - We now use httpx when making requests from our Forgejo implementation. (#941)
  - Resolves: rhbz#2401236


author: Packit <hello@packit.dev> - 0.57.0-1
changelog:
  - We have fixed an issue with the new Forgejo version preventing ogr from working. (#949)
  - Resolves: rhbz#2401236


author: Packit <hello@packit.dev> - 0.58.0-1
changelog:
  - `PagureService` now accepts an optional `user_agent` argument to set a custom User-Agent header. (#953)
  - It is now possible to pass a `headers` argument in `PagureProject.get_file_content`. The default header is set to `Accept: text/plain`. (#954)
  - Resolves: rhbz#2420049


author: Packit <hello@packit.dev> - 0.59.0-1
changelog:
  - Improved handling of retries after errors to avoid hitting rate limits if possible. (#958)
  - `GithubPullRequest.labels` property is now cached for better performance and to be consistent with other services. (#960, #961)
  - Resolves: rhbz#2422233


author: Packit <hello@packit.dev> - 0.60.0-1
changelog:
  - A new method `get_rate_limit_remaining()` to check rate limit thresholds has been added to the service API. (#970)
  - Resolves: rhbz#2430818


author: Packit <hello@packit.dev> - 0.60.1-1
changelog:
  - The method `get_rate_limit_remaining()` now also supports repository-specific checks for GitHub. (#972)
  - Resolves: rhbz#2435481


author: Packit <hello@packit.dev> - 0.61.1-1
changelog:
  - Force downstream synchronization of upstream configuration to enable side tagging in EPEL 10.
  - Resolves: rhbz#2437993


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.19.5-4
changelog:
  - Work around Python 3.14 issues; fixes RHBZ#2372014
  - Do not error on warnings, particularly DeprecationWarning
  - Report and skip TestImportModelCreate::test_dynamic_model regression


author: Sandro <devel@penguinpee.nl> - 2.3.3-2
changelog:
  - limit number of tests
  - patch tests accomodating changes in dependencies
  - drop pytz and xarray as BRs (both optional)
  - Close RHBZ#2332196


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.24.4-3
changelog:
  - Temporarily omit dask/xarray to build for Python 3.14
  - Disable dask extra until it can be built
  - Disable xarray extra until it can be built, and due to a circular
    dependency
  - Fixes RHBZ#2372030


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.3.0-3
changelog:
  - “Fake” the PULP_CBC_CMD solver using coin-or-Cbc
  - Work around a regression with coin-or-HiGHS 1.12
  - Make the extras metapackages noarch


author: Michel Lind <salimma@fedoraproject.org> - 0.3.2-2
changelog:
  - Disable update_readme_test, brings in additional dependency
  - Ship license text; update doc filenames


author: Michel Lind <salimma@fedoraproject.org> - 0.4.2-2
changelog:
  - Disable more unneeded test dependencies
  - Switch to using pytest directly so we can control verbosity easily


author: Michel Lind <salimma@fedoraproject.org> - 0.5.0-2
changelog:
  - Adjust patches for updated pyproject.toml
  - Adjust for upstream dropping tox.ini
  - Drop conditionals for old setuptools


author: Robert Scheck <robert@fedoraproject.org> - 0.10.0-11
changelog:
  - Update license identifier to SPDX expression
  - Add patch proposal to change incompatible pointer type (#2259528)


author: Jos de Kloe <josdekloe@gmail.com> 2.1.8-1
changelog:
  - Update to 2.1.8 (#2406074)
  - Update license following discussion on https://github.com/jswhit/pygrib/issues/275


author: Doğukan Çağatay <dogukan.cagatay@aiven.io> - 0.10.0-9
changelog:
  - Modernize spec file and use pyproject macros
  - Replace %py3_check_import with %pyproject_check_import
  - Simplify package naming by using direct names instead of macros (i.e.
    srcname, slugname)
  - Remove manual file listings that are now handled by %pyproject_files
  - Add comment to specify the version for the existing patch to be deleted
  - Remove explicit runtime pytest dependency which is already handled via
    %pyproject_buildrequires macro


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.0.8-10
changelog:
  - Compile as C++14 instead of C++11, for compatibility with eigen3 5.0
  - Use the original upstream for fcl, rather than the ambi-robotics fork


author: Manish Tiwari <matiwari@redhat.com> - 1.4.0-1
changelog:
  - Update to 1.4.0 version
  - Bundled whisper.cpp
  - Remove pybind11 to use system available pybind11-devel


author: Tom Callaway <spot@fedoraproject.org> - 0.27-19
changelog:
  - apply upstream cleanup commits for modern python support
  - modernize package for new python macros
  - thanks to John for the heads-up


author: Peter Bieringer <pb@bieringer.de> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - add BuildRequires: python3-packaging
  - force to use "passlib" instead of "libpass"


author: Pavel Raiskup <praiskup@redhat.com> - 5.10-1
changelog:
  - new upstream release, packages use RPM built-in sysusers support:
    https://github.com/praiskup/resalloc/releases/tag/v5.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.11-1
changelog:
  - new upstream release, don't keep cleanup processes indefinitely:
    https://github.com/praiskup/resalloc/releases/tag/v5.11


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.7.0-15
changelog:
  - Modernize packaging
  - Update License to reflect the presence of public-domain code
  - Add a man page


author: Ondřej Nosek <onosek@redhat.com> - 1.68-6
changelog:
  - Patch: `pre-push-check`: bogus error - file wasn't listed
  - Patch: Fix mockbuild --srpm-mock specfile_path
  - Patch: `patch`: Execute subprocess in text mode
  - Patch: type: fix typo in requirements README.
  - Patch: `install`: add rpmbuild arguments `--with` and `--without`
  - Patch: `srpm`: man page generation fixed


author: Ondřej Nosek <onosek@redhat.com> - 1.69-1
changelog:
  - Only update the progress bar when meaningfully changed (code)
  - Don’t set up upload progress when stdout isn’t a tty (code)
  - Fix unittests for Python 3.14 (onosek)
  - `sources`: set "Accept-Encoding: identity" header on HTTP requests
    (decathorpe)
  - Accept auto-generated sources in pre-push checks (fweimer)
  - Add mock configuration option to build and srpm commands for use along with
    the srpm mock option, same as in mockbuild command. (abobrov)
  - `srpm`: man page generation fixed (onosek)
  - `install`: add rpmbuild arguments `--with` and `--without` - 541 (gleiro)
  - type: fix typo in requirements README. (gleiro)
  - `patch`: Execute subprocess in text mode (ferdnyc)
  - Fix mockbuild --srpm-mock specfile_path (wngtk)
  - `pre-push-check`: bogus error - file wasn't listed - #747 (onosek)
  - Switch to %pyproject_* macros (onosek)
  - Use the spec name to assemble src.rpm name (sergio)
  - Jenkinsfile: use local declaration instead the global (onosek)
  - `srpm`: --offline arg to prevent connecting to Koji - 600 (onosek)
  - `mockbuild`: -r argument as shortcut of --root (sergio)
  - `rhpkg mockbuild` won't show a hint with '--target' (onosek)


author: Ondřej Nosek <onosek@redhat.com> - 1.69-3
changelog:
  - Patch: Check the correct sorting of imports from now on
  - Patch: `update`: interactive editor is broken


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.0-1
changelog:
  - Create simple CLI tool to examine keycache in Python and refresh all entries in keycache
  - Verify Thread-safe + Unwritable Cache + Negative Cache
  - Revamp Sphinx documentation
  - Patch Enforcer to validate against multiple issuers


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.6-1
changelog:
  - Fix SQL injection risk in KeyCache by using parameterized SQLite queries
  - Prevent sibling-path authorization bypass in Enforcer scope checks


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.7-1
changelog:
  - Remove legacy parent SciToken chaining behavior from token initialization and claim handling
  - Harden Enforcer scope path traversal validation (including encoded traversal checks)
  - Clean up documentation references to parent/chained SciTokens


author: Packit <hello@packit.dev> - 1.19.4-1
changelog:
  - Update to 1.19.4 upstream release
  - Resolves: rhbz#2374311
  - Remove upstream’s upper-bound on the version of python-packaging
  - Add bootstrap conditional to break new snakemake circular dep.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.4.0^20251001git4dd90dd-1
changelog:
  - Temporarily package a post-release snapshot
  - For compatibility with snakemake-interface-logger-plugins 2.0.0


author: Packit <hello@packit.dev> - 0.38.0-1
changelog:
  - A bug leading to incorrect EVR expansion has been fixed. (#492)
  - Prevented side-effects during condition evaluation that could occur when expanding macros that manipulate other macros, leading to misinterpreted validity of condition branches. (#499)


author: Packit <hello@packit.dev> - 0.40.0-1
changelog:
  - `Specfile()` has a new `sanitize` option that enables best effort sanitization of potentially dangerous constructs such as shell expansions and unsafe Lua macros before they are passed to RPM for parsing. (#519)
  - Fixed incorrect parsing of nested macros. (#522)


author: Packit <hello@packit.dev> - 0.40.2-1
changelog:
  - Trailing whitespaces at the end of specfile sections are now ignored during parsing. (#531)
  - Resolves: rhbz#2461109


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.0.24-4
changelog:
  - Unretirement request:
    https://forge.fedoraproject.org/releng/tickets/issues/13278 Revert
    "Orphaned for 6+ weeks"


author: Artem Polishchuk <ego.cordatus@gmail.com> - 1.6.1-1
changelog:
  - 1.6.1
  - Port on new Python packaging paradigm
  - Switch to new fork https://github.com/solsticegamestudios/steam


author: Jerry James <loganjerry@gmail.com> - 1.4.6-1
changelog:
  - Version 1.4.6
  - Drop upstreamed testtools patch
  - Drop the python3-subunit-test subpackage
  - New gojson2subunit and junitxml2subunit filters


author: Jakub Kadlcik <frostyx@email.cz> 1.4-1
changelog:
  - Permit dnf4 to check for reboot with non-root user (riehecky@fnal.gov)
  - Add --reboot-only filter (riehecky@fnal.gov)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.6.8-3
changelog:
  - Better generate test dependencies, skipping fewer tests
  - Add a conditional for the disabled pathops extra


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.6.1-1
changelog:
  - Update to 2.6.1 (close RHBZ#2419408)
  - Fixes CVE-2025-66471 / GHSA-2xpw-w6gg-jr37
  - Fixes CVE-2025-66418 / GHSA-gm62-xv2j-4w53


author: Benjamin A. Beasley <code@musicinmybrain.net> - 25.08-20
changelog:
  - Backport several OpenEXRCore security fixes
  - Fixes CVE-2026-34378 / GHSA-v76p-4qvv-vh4g; closes RHBZ#2455493
  - Fixes CVE-2026-34380 / GHSA-q3v8-hw4m-59w5; closes RHBZ#2455534
  - Fixes CVE-2026-34588 / GHSA-588r-cr5c-w6hf; closes RHBZ#2455505
  - Fixes CVE-2026-34589 / GHSA-p8xc-w3q4-h64x; closes RHBZ#2455501
  - Fixes CVE-2026-34379 / GHSA-w88v-vqhq-5p24; closes RHBZ#2455497


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.5-3
changelog:
  - Security fix for CVE-2025-4574 (fix RHBZ#2366569)
  - The package was rebuilt with rust-crossbeam-channel 0.5.15.


author: Martin Kutlak <mkfedora@outlook.com> - 1.3.14-1
changelog:
  - Update to upstream version 1.3.14 rhbz#2273502 rhbz#2261617
  - Fix build with -Wincompatible-pointer-types PR#5


author: Brad Bell <bradbell at seanet dot com> - 2025.0.2-3
changelog:
  - Change import toml -> import tomli; see
  - https://fedoraproject.org/wiki/Changes/DeprecatePythonToml


author: Charalampos Stratakis <cstratak@redhat.com> - 3.10.17-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.15-4
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE 2026-3644, CVE-2026-4224
  Resolves: rhbz#2457941, rhbz#2458221, rhbz#2458013, rhbz#2444704, rhbz#2448188, rhbz#2448204


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-3
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: rhbz#2444705, rhbz#2448189, rhbz#2448205, rhbz#2457942, rhbz#2458014, rhbz#2458222


author: Karolina Surma <ksurma@redhat.com> - 3.15.0~a1-2
changelog:
  - Use bundled wheels on Fedora < 43
  - Properly export CFLAGS+LDFLAGS when invoking make install to fix 3rd-party extension building


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251114git6c77b6b-1
changelog:
  - Update to 0^20251114git6c77b6b
  - `PyConfig_Get()` is also available on Python 3.8
  - Add `PyUnstable_Unicode_GET_CACHED_HASH()` function
  - Add `PyTuple_FromArray()` function


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:0^20251015.e510a7b-1
changelog:
  - Update to 0^20251015.e510a7b
  - Add an Epoch since the previous update had the wrong date
  - Switch snapshot info from <date><scm><revision> to <date>.<revision>


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:0^20251108.11cb80f-1
changelog:
  - Update to 0^20251108.11cb80f
  - Don’t include structmember.h in pythoncapi_compat.h; avoids conflicts due
    to names without "Py" prefixes.


author: Dmitri Smirnov <dmitri@smirnov.ee> - 4.6.0-2
changelog:
  - Move pre-downloaded files to patch to avoid issues when building 
  - Remove pqtch 1251 which is no longer needed


author: Germano Massullo <germano.massullo@gmail.com> - 4.7.0-1
changelog:
  - 4.7.0 release
  - Moved from tar.gz to tar.xz upstream file and updated Source0
  - Removed EL7 and EL8 leftovers
  - Moved from Qt5 to Qt6
  - Added cmake.patch


author: Remi Collet <remi@remirepo.net> - 0.100-1
changelog:
  - update to 0.100
  - re-license spec file to CECILL-2.1
  - report no usable sources tarball
    https://github.com/qelectrotech/qelectrotech-source-mirror/issues/418
  - open https://bugzilla.redhat.com/2433755
    Please build kf5-kcoreaddons for EPEL 10 (and 10.1)
  - open https://bugzilla.redhat.com/2433762
    Please build kf5-kwidgetsaddons for EPEL-10 (and 10.1)


author: ErrorNoInternet <errornointernet@envs.net> - 0^20240518-1
changelog:
  - Bump commit to bf7b41c2ff3f24a2031193b62aa76d35e8842b5a.
  - Remove Makefile-ldflags patch as LDFLAGS are now included upstream.


author: Liu Yang <Yang.Liu.sn@gmail.com> - 5.15.13-2
changelog:
  - Add riscv64 to macro i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 mips mipsel mips64el riscv64.


author: Cristian Le <git@lecris.dev> - 7.5-1
changelog:
  - Update to 7.5 (rhbz#2093576,rhbz#2341257,rhbz#2350099)
  - Reworked most of the packaging
  - Use CMake build system
  - Use %forgemeta macros
  - Added devel packages
  - Debundled what could be debundled and commented on the rest


author: Richard W.M. Jones <rjones@redhat.com> - 4.0.5-2
changelog:
  - Remove downstream patch which allowed remote connections (RHBZ#2333072)
  - Move license to MPL 2.0 (RHBZ#2333074)


author: Tobias Urdin <tobias.urdin@gmail.com> - 4.0.9-3
changelog:
  - Update logrotate config

  Thu Mar 26 2026 Peter Lemenkov <lemenkov@gmail.com> - 4.0.9-2
  - Improve shell wrapper


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.13-11
changelog:
  - Convert License tag to SPDX format
  - Convert to autosetup
  - Use relative symlinks from /usr/bin/* to ../libexec/rancid/*
  - Remove doc files that were duplicated in /usr/share/rancid


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.13-12
changelog:
  - Enable git as default VCS for new installs
  - Remove extraneous BuildRequires
  - Requires /usr/sbin/sendmail and cronie for crontabs
  - Requires openssh-clients and git
  - Suggests telnet


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-5
changelog:
  - Add dbus-common dependency as xml is installed in dbus-1 directory
  - Cleanup patches into 3 logical changes and update upstream status
  - Add upstream status of RPM lint incorrect-fsf-address error


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-6
changelog:
  - Exclude some architectures that does not have grub2-tools-minimal package
  - Add upstream xml file license issue link


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-7
changelog:
  - Change dbus-common dependency from BuildRequires to Requires
  - Update upstream license issue and update license information
  - Generate docbook for yelp or khelpcenter


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-11
changelog:
  - Don't mark man page as doc
  - Update patches against upstream version
  - Yelp SVG image workaround: Convert SVG to PNG using thorvg
  - thorvg workaround due to command rename in F42/F43


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-12
changelog:
  - Update patch 4 with CC0-1.0.txt and include it in rauc license
  - Add COPYING to rauc-doc license
  - Fix license as LGPL-2.1-or-later not LGPL-2.1-only


author: Erich Eickmeyer <erich@ericheickmeyer.com> - 0.17.2-5
changelog:
  - Major spec file overhaul for Fedora packaging compliance
  - Added compatibility wrapper for xdg import
  - Improved Qt resource and manpage generation logic
  - Refined file and symlink handling, .pth and compat modules
  - Cleaned up excludes, bytecode, and manual packaging


author: Erich Eickmeyer <erich@ericheickmeyer.com> - 0.17.2-6
changelog:
  - Add xdg-wrapper.py and raysession_xdg_compat.py as packaged Sources
  - Reference those files using their Source4 and Source5 macros in the spec
  - Upload sources to distgit and adjust install logic to use Source macros


author: Erich Eickmeyer <erich@ericheickmeyer.com> - 0.17.2-7
changelog:
  - Refactor install section: introduce DATADIR, PY_SITELIB, PY_LEGACY variables
  - Consolidate .pth and compat shim installation into loops
  - Clean up bytecode removal and DRY repeated paths
  - Fix rpmlint warnings and rebuild SRPM/RPM


author: Erich Eickmeyer <erich@ericheickmeyer.com> - 0.17.2-9
changelog:
  - Improve resource handling: ensure Qt resources and fonts are
    correctly compiled/installed so icons and application fonts load
    at runtime (fix rcc detection and safe regeneration behavior).


author: John Kacur <jkacur@redhat.com> - 2.10-1
changelog:
  - Rebase to upstream v2.10
  - Add patch to add timestamp delta to hwlatdetect
  - Add patch to fix growing shm-stat file
  - Add patch to use relative symlinks for Python scripts


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-6
changelog:
  - Add forward and backwards weak deps in -gssp subpackage to gnome-shell
  - Remove wrong req. on -kio
  - Let -kio subpackage Supplement kf6-kio-core


author: Charalampos Stratakis <cstratak@redhat.com> - 343-3
changelog:
  - Add -mbranch-protection=standard to extension builder flags
  - mbranch-protection=standard from the standard hardening flags on aarch64,
    enables BTI and PAC. PAC is ABI dependent and we want extensions to be
    compatible.


author: Jonathan Wright <jonathan@almalinux.org> - 7.3.2-1
changelog:
  - update to 7.3.2 rhbz#2315906
    fixes CVE-2024-46981
    fixes CVE-2024-51741
    fixes CVE-2024-31449
    fixes CVE-2024-31227
    fixes CVE-2024-31228


author: Pavel Raiskup <praiskup@redhat.com> 1.7-1
changelog:
  - resalloc-aws-new: run playbook with stdin=/dev/null
  - resalloc-aws-list: no need to double-kill "shutting-down" instances


author: Pavel Raiskup <praiskup@redhat.com> 2.1-1
changelog:
  - The wait-for-ssh script was moved to resalloc-helpers
  - releng: release to all active Fedora releases


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.3-1
changelog:
  - Add functionality for tagging resource by its crn (j1.kyjovsky@gmail.com)
  - Add option for specifying resource group (j1.kyjovsky@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 3.0-1
changelog:
  - Log the instance create request content
  - Allow specifying a list of Floating IPs
  - Drop executable bits from PYTHONPATH scripts


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.18.0-1
changelog:
  - Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
    rhbz#2350845 rhbz#2348839 rhbz#2331990


author: Graham Leggett <minfrin@sharp.fm> - 1.0.6-1
changelog:
  - Add optional jitter to the delay.
  - Avoid the final delay when running a command a specific number of times.
  - Generate the man page during the dist hook, and not at build time.


author: mhorky <mhorky@redhat.com> - 0.3.5-2
changelog:
  - Simplify packaging
  - Disable bcond 'check' by default, reflecting RHEL spec file
  - Drop unnecessary 'BuildRequires' statements, ignore insights-client
  - Set ownership for /etc/rhc/


author: Pino Toscano <ptoscano@redhat.com> 7-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Finnish) (ricky.tigg@gmail.com)
  - Translated using Weblate (Finnish) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Finnish) (jiri.gronroos@iki.fi)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - test: drop no more used machine_python() helper function
    (ptoscano@redhat.com)
  - test: use a simpler way to append content to a file (ptoscano@redhat.com)
  - test: use f-strings to replace other string formattings (ptoscano@redhat.com)
  - test: use curl directly to wait for Candlepin (ptoscano@redhat.com)
  - test: drop extra activation key code (ptoscano@redhat.com)
  - test: upload product certificates to /etc/pki/product-default
    (ptoscano@redhat.com)
  - test: use onlyImage() from cockpit test lib (ptoscano@redhat.com)
  - Makefile: fix names of po extractor tools (ptoscano@redhat.com)
  - fix: Drop deprecated cockpit.resolve() (martin@piware.de)
  - Bump cockpit testlib to 327 (martin@piware.de)
  - fix: adapt to the new state of insights-client.service on failure
    (ptoscano@redhat.com)
  - Update cockpit test lib to 323 (ptoscano@redhat.com)
  - test: switch one more org to SCA one (ptoscano@redhat.com)
  - test: Use SCA to register (mhorky@redhat.com)
  - fix: switch to the proper URL for Red Hat's Hybrid Cloud Console
    (ptoscano@redhat.com)
  - test: setup the subscription repositories (ptoscano@redhat.com)
  - test: mock-insights: switch away from ssl.wrap_socket() (ptoscano@redhat.com)
  - test: switch to CERT auth for insights-client (ptoscano@redhat.com)
  - chore: ignore node_modules for flake8 (ptoscano@redhat.com)
  - test: mock-insights: implement upload and delete platform endpoints
    (ptoscano@redhat.com)
  - test: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com)
  - test: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com)
  - feat: switch from .last-upload.results to .lastupload (ptoscano@redhat.com)
  - fix: Remove Auto-attach button (jhnidek@redhat.com)
  - chore: test: use the new syspurpose command (ptoscano@redhat.com)
  - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - chore: bump version of black to 24.3.0 (ptoscano@redhat.com)
  - test: wait more when registering to Insights (ptoscano@redhat.com)
  - test: break insights-client in a different way (ptoscano@redhat.com)
  - test: mock-insights: return 404 for missing systems in /systems
    (ptoscano@redhat.com)
  - test: wait longer in certain situations (ptoscano@redhat.com)
  - Fix obsolete cockpit defer API (martin@piware.de)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - Update cockpit test lib and webpack build (martin@piware.de)
  - Use proper imports (martin@piware.de)
  - flake8: update/improve the config (ptoscano@redhat.com)
  - test: split/wrap overly long strings (ptoscano@redhat.com)
  - test: minor comment updates (ptoscano@redhat.com)
  - test: format embedded Python snippets with black==23.3.0
    (ptoscano@redhat.com)
  - test: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com)
  - test: drop bits for rhel-8-5 (ptoscano@redhat.com)
  - Use 'type' instead of 'which' which is standard unix (kkoukiou@redhat.com)
  - Format code with black==23.3.0 (ptoscano@redhat.com)
  - Update black to version 23.3.0 (ptoscano@redhat.com)
  - Fix usage of exception state (mmarusak@redhat.com)
  - Drop usage of obsolete cockpit.defer() (martin@piware.de)
  - Fix getSyspurposeStatus to not return an ever-pending promise
    (martin@piware.de)
  - Makefile: Fix "make watch" to work from a clean tree (martin@piware.de)
  - build: use `pip wheel` to get cockpit wheel (allison.karlitskaya@redhat.com)
  - Set autocomplete to "current-password" for password inputs
    (jhnidek@redhat.com)
  - Run `npm install` with `--ignore-scripts` (mpitt@redhat.com)
  - README: document development dependencies for Fedora/Ubuntu
    (jvanderwaa@redhat.com)
  - Install into /usr/local/ by default (martin@piware.de)
  - Makefile: Some noise cleanup (martin@piware.de)
  - build: use translation tools from pkg/lib (martin@piware.de)
  - Makefile: Drop update-po rule (martin@piware.de)
  - Start using cockpit-po-plugin instead of Po2Json (kkoukiou@redhat.com)
  - Add support for dark theme (kkoukiou@redhat.com)
  - Bump up pkg/lib reference tag (kkoukiou@redhat.com)
  - Bump up patternfly (kkoukiou@redhat.com)
  - Bump up react version and start using new client API (kkoukiou@redhat.com)
  - node_modules: Update chrome-remote-interface to 0.32 (martin@piware.de)
  - Makefile: Add support for /pybridge scenario (martin@piware.de)


author: Packit <hello@packit.dev> - 14-1
changelog:
  - Convert license headers to SPDX format
  - Bug fixes and translation updates


  - Resolves: rhbz#2376500


author: Kevin Fenzi <kevin@scrye.com> - 1.4.6-31
changelog:
  - Add patch to find systemd-journald config and avoid warning. Fixes rhbz#2361203
  - Add patch to fix false positive on Li0n from bin/sbin merge. Fixes rhbz#2382304


author: Michel Lind <salimma@fedoraproject.org> - 0.46.2-2
changelog:
  - Run autoreconf since the Git tag does not contain configure
  - Use %%conf conditionally if RPM has it defined


author: Tom Callaway <spot@fedoraproject.org> - 2.8.0-1
changelog:
  - update to 2.8.0
  - filter out the "alternative-link-missing" and "alternative-generic-name-not-symlink" checks
    these reflect the OpenSUSE packaging guidelines, but NOT the Fedora ones (bz2208474)


author: Miro Hrončok <mhroncok@redhat.com> - 2.8.0-2
changelog:
  - Filter out cross-directory-hard-link
  - https://fedoraproject.org/wiki/Changes/Hardlink_identical_files_in_packages_by_default
  - Fixes: rhbz#2400621


author: Aaron Merey <amerey@redhat.com> - 5.9.0-8
changelog:
  - Backport upstream fix for MADV_GUARD_INSTALL/REMOVE (kernel >= 6.13)
    to unbreak recording of multi-threaded programs (upstream commit 34ff3a70).


author: Aaron Merey <amerey@redhat.com> - 5.9.0-9
changelog:
  - Fix FTBFS on rawhide (gcc 16, glibc 2.43+) by including <limits.h>
    in src/test/util.h, which several test files rely on for INT_MAX
    and other limit macros.


author: Michal Ruprich <mruprich@redhat.com> - 3.4.0-1
changelog:
  - New version 3.4.0
  - Fix for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086
  - Fix for CVE-2024-12087, CVE-2024-12088, CVE-2024-12747


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-6
changelog:
  - Fix for CVE-2026-41035
  - Fixing bad time in rsync logs
  - Fixing regression from CVE-2024-12086 fix
  - Fixing improper clearing of DISPLAY env variable


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
  - Harden rsyslog service unit
  - Disable openssl engines support
    Resolves: rhbz#2320050


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-1
changelog:
  - Rebase to 8.2510.0
    Resolves: rhbz#2404131
  - imjournal open error handling fix
    Resolves: rhbz#2375742
  - Add mmleefparse module to base package


author: Jun Aruga <jaruga@redhat.com> - 3.4.2-24
changelog:
  - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters.
    Resolves: rhbz#2358256


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.0.20-8
changelog:
  - Backport upstream PR to remove base64 dependency
  - Backport upstream fix for ruby34 formatting change


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.3.0-3
changelog:
  - Workaround for new gdk-pixbuf with glycin backend dependency (ref: bug
    2387002)
  - F-43: ignore test failure for now


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.3.0-5
changelog:
  - Upstream fix for tests with glycin based gdk-pixbuf2 2.43.x
  - Exclude tests on glycin ppc64le for now (bug 2275913)
  - Exclude animation test on i686 on Fedora 43


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:2.2.4-8
changelog:
  - Backport upstream patch for ruby34 hash formatting change
  - Add dependency for rubygem(base64) explicitly


author: Vít Ondruch <vondruch@redhat.com> - 1:3.1.16-1
changelog:
  - Update to Rack 3.1.16
    Resolves: rhbz#2124662
  - Denial of service in Content-Disposition parsing (CVE-2022-44571)
    Resolves: rhbz#2164714
    Resolves: rhbz#2164716
  - Denial of service in Content-Disposition parsing (CVE-2022-44570)
    Resolves: rhbz#2164719
    Resolves: rhbz#2164721
  - Denial of service in Content-Disposition parsing (CVE-2022-44572)
    Resolves: rhbz#2164722
    Resolves: rhbz#2164724
  - Denial of service in Multipart MIME parsing (CVE-2023-27530)
    Resolves: rhbz#2176477
    Resolves: rhbz#2176478
  - Denial of service in header parsing (CVE-2023-27539)
    Resolves: rhbz#2179649
    Resolves: rhbz#2179651
  - Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126)
    Resolves: rhbz#2265593
  - Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141)
    Resolves: rhbz#2265594
  - Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146)
    Resolves: rhbz#2265595
  - Possible Log Injection in Rack::CommonLogger (CVE-2025-25184)
    Resolves: rhbz#2345301
  - Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection (CVE-2025-27111)
    Resolves: rhbz#2349810
  - File Inclusion in Rack::Static (CVE-2025-27610)
    Resolves: rhbz#2351231
  - Unbounded-Parameter DoS in Rack::QueryParser (CVE-2025-46727)
    Resolves: rhbz#2364966
  - Rack Session Reuse Vulnerability (CVE-2025-32441). Current version
    actually extracts the affected code into rack-session package.
    Resolves: rhbz#2364965


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.3.3-1
changelog:
  - Update to release v1.3.3
  - Resolves: rhbz#2411664, rhbz#2411410, rhbz#2411148
  - Resolves: rbhz#2410768, rhbz#2410512, rhbz#2410233
  - Resolves: rhbz#2409818, rhbz#2409561, rhbz#2409284
  - Resolves: rhbz#2408345, rhbz#2408091, rhbz#2407818
  - Security. Fixes CVE-2025-31133, CVE-2025-52565, CVE-2025-52881
  - Upstream new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.0-2
changelog:
  - Update packit configuration
  - Adds support for go_vendor_archive and go_vendor_license integration with
    packit


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.1-1
changelog:
  - Update to release v1.4.1
  - Resolves: rhbz#2447251
  - Adopts go2rpm generates spec file
  - New libpathrs build tag not included as that library is not yet available
    in Fedora


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.5-1
changelog:
  - Update to version 0.5.5; fixes RHBZ#2397644
  - Security fix for CVE-2025-59825 / GHSA-3wgq-wrwc-vqmv


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.8.4-1
changelog:
  - Update to version 1.8.4; Fixes RHBZ#2453126
  - Do not expose metapackages for unstable or undocumented features


author: Michel Lind <salimma@fedoraproject.org> - 0.7.0-3
changelog:
  - Enable Unix, ACL, SELinux and systemd-logind features
  - Declare licenses for the uutils-coreutils binary package


author: Michel Lind <salimma@fedoraproject.org> - 0.20.0-5
changelog:
  - Bump termion dependency from 1 to 4 - Change default backend to crossterm
    - Drop ncurses and pancurses backends, ncurses-rs is archived


author: Michel Lind <salimma@fedoraproject.org> - 0.10.0-1
changelog:
  - Update to version 0.10.0; Fixes RHBZ#2303607
  - No longer uses proc-macro-error; Fixes RHBZ#2329702


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.1.1-5
changelog:
  - Use upstreamed patch for avoiding icu crate in non-doc tests
  - Fix rust2rpm.toml compatibility with rust2rpm 28


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.16-2
changelog:
  - Don’t mark files included in the library as documentation
  - This affects four Markdown files. Fixes RHBZ#2415111


author: Michel Lind <salimma@fedoraproject.org> - 0.24.4-2
changelog:
  - Incorporate ueno's changes into rust2rpm.toml and regenerate spec
  - Disable probe tests on ppc64le and s390x


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.23.1-1
changelog:
  - Update to 1.23.1 (close RHBZ#2349449)
  - Use rust2rpm.toml to exclude license file for unbundled libdeflate
  - Update .rpmlintrc file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.24.0-1
changelog:
  - Update to 1.24.0 (close RHBZ#2365609)
  - Now that we can easily re-apply Cargo.toml patches when updating, do not
    use tomcli to remove criterion


author: Michel Lind <salimma@fedoraproject.org> - 0.5.2-4
changelog:
  - Unretire rust-outref as base64-simd needs it; Resolves: rhbz#2426767
  - Spec clean-up; use rust2rpm.toml and a diff file instead of modifying the
    spec directly


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.0-1
changelog:
  - Update to version 0.17.0; Fixes RHBZ#2316899
  - Re-enable all tests except test_procinfo, and a couple we had to skip


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.0-2
changelog:
  - Report and skip failing tests on non-x86_64 architectures
  - Fix tests failing to compile on 32-bit architectures


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.9-2
changelog:
  - Stop patching out the smallvec-1 feature
  - The uv package needs it, beginning with version 0.5.19.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.0-2
changelog:
  - Expand dependency bounds downward rather than requiring old versions
  - Improve documentation for the metadata patch


author: Jose Fernandez <me@jrfernandez.com> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - Update from 0.8.0 to 0.14.0
  - Update features: crossterm/serde/termion → ratatui-crossterm/ratatui-
    termion
  - Default feature changed to ratatui-crossterm


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.5-4
changelog:
  - Re-generate using rust2rpm 27
  - Since it is now easier to re-use a Cargo.toml patch, we use one to remove
    the postcard dev-dependency instead of depending on tomcli.


author: Andreas Schneider <asn@redhat.com> - 0.2.0-1
changelog:
  - Update to version 0.2.0
  - https://github.com/z-galaxy/zlink/releases/tag/zlink-0.2.0
  - resolves: rhbz#2419337


author: Andreas Schneider <asn@redhat.com> - 0.2.0-1
changelog:
  - Update to version 0.2.0
  - https://github.com/z-galaxy/zlink/releases/tag/zlink-0.2.0
  - resolves: rhbz#2419341


author: Julio González Gil <packages@juliogonzalez.es> - 1.95-1
changelog:
  - Update to 1.95 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.95 (#2321940)
    * IMPORTANT: This is the last release supporting CentOS7 or clones
    * Add ipresolve option to select IPv4 or IPv6-only
    * Retry request on HTTP 429 error
    * Fix deadlock in FdManager::ChangeEntityToTempPath
    * Enable static lock checking and fix locking errors
    * Fix use-after-free in FdManager::ChangeEntityToTempPath


author: Julio González Gil <packages@juliogonzalez.es> - 1.96-1
changelog:
  - Update to 1.96 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.96 (#2416816)
    * Require FUSE 3 on Linux
    * Require C++14
    * Improve IO concurrency
    * Rename -o endpoint to -o region for clarity
    * Avoid HeadObject calls with improved stats cache usage


author: Julio González Gil <packages@juliogonzalez.es> - 1.97-1
changelog:
  - Update to 1.97 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.97 (#2416816)
    * Bugfix: Do not honor "-o nonempty"


author: Michel Lind <salimma@fedoraproject.org> - 0.9.5-6
changelog:
  - Fix building with gnu-efi 3.0.18
  - Fix building on Fedora 41+ due to OpenSSL engine deprecation
  - Fix building on aarch64, need to use non-TEST_BINARY_FORMAT codepath like x86_64
  - FIxes: RHBZ#2301267


author: Matthew Burket <mburket@redhat.com> - 0.1.74-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.74
  - Remove /usr/bin/python3 from BuildRequires


author: Matthew Burket <mburket@redhat.com> - 0.1.75-1
changelog:
  - Update to latest upstream release
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.75


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 0.1.76-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.76


author: Matthew Burket <mburket@redhat.com> - 0.1.77-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.77


author: Matthew Burket <mburket@redhat.com> - 0.1.78-1
changelog:
  - Update to latest upstream release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.78


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.13.0-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Restore binary package License expression, lost in a previous update


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Brian Bockelman <bbockelman@morgridge.org> - 1.3.0-1
changelog:
  - Add scitokens-generate-jwks CLI for key generation.
  - Add environment variable-based configuration on library initialization.
  - Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
  - Add negative cache for failed issuer lookups (preventing frequent re-queries)
  - Add monitoring API for per-issuer validation statistics
  - Add optional background thread for JWKS refresh
  - Add keycache load, metadata, and delete APIs
  - Revert "Fix memory leak in rs256_from_coords" by @djw8605
  - Add CTest-based integration test with JWKS server and TLS infrastructure


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.0-2
changelog:
  - Add keycache.allow_in_memory config option with in-memory SQLite fallback
  - Add persistent anchor connection for shared in-memory SQLite database
  - Improve error messages when keycache file cannot be read or written
  - Add integration test for keycache not-writable error message
  - Improve cache directory permission tests to handle common deployment misconfigurations
  - Implement keycache location retrieval and update library to 0.0.3
  - Fix typo in SQLite file extension in integration and main tests


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.1-1
changelog:
  - Fix scope path boundary validation to deny sibling-prefix authorization bypasses
  - Reject parent-directory traversal in scope paths, including encoded traversal forms
  - Add regression tests covering sibling-prefix and traversal authorization checks


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.0.6-8
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Update License expression based on a current Rawhide build


author: Daniel Rusek <mail@asciiwolf.com> - 1.2.0-4
changelog:
  - Add AppStream metadata
  - Install desktop icon in standard location
  - Do not use hardcoded paths in desktop file


author: Zdenek Pytela <zpytela@redhat.com> - 42.24-1
changelog:
  - Allow mdadm to use CAP_BPF during RAID monitoring
  - Allow rhsmcertd read anaconda run files
  - Allow rpc.mountd setuid and setgid capabilities
  - Use kernel_dgram_send() for systemd_notify_t
  - Allow lttng-sessiond to use sd_notify
  - Label /etc/aliases.cdb with etc_aliases_t
  - Add aliases.lmdb to mta_filetrans_named_content()
  - Update gpg_role() interface with unix_stream_socket permissions
  - Allow systemd-hostnamed to create its Varlink socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.25-1
changelog:
  - Dontaudit ps permissions that tlp_t does not need (bsc#1257527)
  - TLP uses ps aux to check for different services (bsc#1257527)
  - Introduce separate types for generic systemd generators.
  - Confine system generator nm-initrd-generator.sh (bsc#1257754)
  - Allow rtkit-daemon dbus chat with systemd-logind
  - ecryptfs uses /home/.ecryptfs for full homedir encryption (bsc#1258350)
  - Dontaudit tlshd write generic certificate dirs
  - Allow systemd-coredump the kill capability in the user namespace
  - Allow NetworkManager list bpf directories
  - Allow virtnodedevd the dac_read_search capability
  - Allow pkcsslotd read files in /proc and /sys
  - Allow pkcsslotd map its private tmpfs files
  - Allow dovecoth-auth to connect to systemd-logind over a unix socket
  - Allow tlshd write generic certificate dirs


author: Zdenek Pytela <zpytela@redhat.com> - 43.1-1
changelog:
  - Allow redis_t to create netlink_rdma_socket
  - Allow systemd create symlinks in /run/varlink/registry
  - Support hooks in /run/systemd/resolve.hook
  - Allow virtlogd_t dac_override for virtlock (bsc#1253389)
  - Allow mdadm use modprobe (bsc#1257793)
  - Allow systemd-mountfsd the perfmon capability
  - Allow lttng tracing in default configuration
  - Allow rtkit-daemon write systemd inhibit pipes
  - Apply the systemd system generator template to the kdump-dep generator
  - Apply the systemd system generator template to the anaconda generator


author: Zdenek Pytela <zpytela@redhat.com> - 43.2-1
changelog:
  - Allow fedoratp_exec_t be an entrypoint of unconfined_t
  - Allow rasdaemon_t to list pstore (bsc#1259742)
  - Allow virtqemud_t send kill signal to svirt_tcg_t
  - Allow virtqemud_t get priority of a svirt_t process
  - Allow sysadm user connect to lvm over a unix stream socket
  - Allow staff user delete thump_tmp_t files
  - Allow staff user connect to systemd-logind over a unix stream socket
  - Allow staff user mount /proc
  - Allow virtqemud map vhost net device
  - Dontaudit ps to read proc (bsc#1257527)
  - Allow dovecot_deliver_t map its private tmp files
  - Allow rpcbind get attributes of the pidfs filesystem
  - Fix names in mysql.if
  - Allow create kerberos files in mysql db home
  - Allow systemd-resolved connect to systemd-networkd over a unix stream socket


author: Zdenek Pytela <zpytela@redhat.com> - 43.4-1
changelog:
  - update support for polkit agent helper (bsc#1251931)
  - Add auth_nnp_domtrans_chkpwd()
  - Allow staff_sudo_t read PID1's process state
  - Allow staff_sudo_t read logind sessions files
  - Allow nfs-server system generator the dac_read_search capability
  - Allow snmpd create and use netlink tcpdiag socket
  - Allow systemd-coredump signull containers
  - Allow named_filetrans_domain filetrans flatpak homedir (bsc#1253682)
  - Dontaudit logrotate perfmon and sys_admin capabilities
  - Allow samba-bgqd sendto over a unix dgram socket


author: Zdenek Pytela <zpytela@redhat.com> - 43.5-1
changelog:
  - Allow virtnetworkd get attributes of filesystems with extended attributes
  - Allow Polkit to get attributes of user terminals
  - Allow nfsidmap connect to xdm over a unix stream socket
  - Label /usr/share/accountsservice with accountsd_share_t
  - Allow systemd-resolved write to systemd-networkd socket
  - Dontaudit setroubleshootd read root's home files like .rpmmacros
  - Support sandboxing features for sysadm_t
  - Allow unconfined_t mounton on itself (bsc#1261035)


author: Zdenek Pytela <zpytela@redhat.com> - 43.6-1
changelog:
  - Allow accountsd dbus chat with systemd-homed
  - Allow accountsd read accountsd_share_t files
  - Fix file context specification for /usr/share/accountsservice
  - Allow xdm_exec_t be an entrypoint of login_userdomain
  - Allow sshd-session send a generic signal to sshd-auth
  - Allow virtnetworkd get attributes of filesystems with extended attributes
  - Allow Polkit to get attributes of user terminals
  - Allow nfsidmap connect to xdm over a unix stream socket


author: Zdenek Pytela <zpytela@redhat.com> - 43.7-1
changelog:
  - Allow init nnp domain transition do dirsrv_t and dirsrv_snmp_t
  - Allow accounts-daemon read accountsd_share_t symlinks
  - Allow thump_t setattr on thumb_tmp_t lnk_files
  - Allow gpsd the setcap process capability
  - Allow accountsd list accountsd_share_t dirs
  - Allow sshd-auth/sshd-session get attributes of their sshd parent


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-5
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.36-1
changelog:
  - audit_data: include syslog when needed
  - Rename appdata to metainfo
  - Replace python-six with python 3 only code


author: Mikhail Medvedev 1.0.2-1
changelog:
  - Added Italian translation by Giovanni Scafora
  - Fix errors in RPM spec file
  - Added changelog file


author: Mikhail Medvedev 1.1.1-1
changelog:
  - Added mutltiplatform translation path
  - I2C driver has been changed
  - Added the option to switch Qt versions
  - Fixed UDEV and LIBUSB pathes, used PKGCONFIG


author: Marcel Metz <me@marcel-metz.net> - 1.2-1
changelog:
  - Updated upstream: Project was moved to https://github.com/aklomp/shrinkpdf
  - New upstream release 1.2


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 0.4.0-1
changelog:
  - Update to v0.4.0
  - The request_timeout_secs configuration has been replaced by
    total_request_timeout_secs and sigul_request_timeout_secs. The total
    request timeout is the amount of time before an individual request is
    terminated. The sigul request timeout is the amount of time the bridge
    will wait for a Sigul request to succeed before canceling and retrying.


author: Jeremy Cline <jeremycline@microsoft.com> - 0.10.0-1
changelog:
  - Update to v0.10.0
  - All requests to sigul are retried, rather than just those that fail due
    to I/O or timeouts


author: Ranjan Maitra <aarem@Fedoraproject.org> - 1.4.0-11
changelog:
  - replaced the linking file with magick to convert the .jxl files now used by Fedora for backgrounds.
  - consequently, brought in BuildRequires for ImageMagick and f43-backgrounds-base
  - incorporated Todd Zullinger's patch to drop /var/run/ in favor of __runstatedir__ and dropped slim-tmpfiles.conf


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.74.1
   - FDE: measure DeployedMode and AuditMode variables if they appear
     as disabled in the event log to avoid a potential reseal-failure
     boot loop
   - LP: #2139611 FDE: fix db updates by allowing multiple payloads
   - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising
     memory lock limit when required
   - LP: #2139099 snap-confine: bump the max element count of the BPF
     map used to store IDs of allowed/matched devices to 1000
   - Interfaces: Added pidfd_open and memfd_secret to seccomp template
   - Interfaces: camera | add locking permission for /dev/video


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 1.1.16-1
changelog:
  - update to 1.1.16 (resolves rhbz#2405379)
  - drop obsolete patches
  - apply upstream patch to fix appstream data


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 1.1.18-1
changelog:
  - update to 1.1.18 (resolves rhbz#2420854)
  - drop obsolete patch
  - add missing cairo-1.0 and xlib-2.0 typelib dependencies for tests
  - add new icons to file list
  - run GTK3 tests under Xvfb


author: josef radinger <cheese@nosuchhost.net> - 2.7.0-1
changelog:
  - bump version
  - source is now on github
  - patches 0+1 no lomger needed
  - add/remove/change several %docs
  - switch to SDL2-devel
  - add manpages, icon + metainfo


author: Luboš Uhliarik <luhliari@redhat.com> - 7:7.1-1
changelog:
  - new version 7.1
  - removed squidclient
  - removed purge
  - removed cachemgr.cgi
  - removed basic_smb_lm_auth and ntlm_smb_lm_auth helpers


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.8-1
changelog:
  - Update to SSCG 3.0.8
  - Fix IP address handling in CA certificate SAN constraints * Add automatic
    single-IP subnet mask to IP addresses in CA name constraints * Update
    help text to show simplified IP format without subnet mask
  - Greatly expand the in-tree test suite


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.3-1
changelog:
  - Update to 4.0.3
  - Don't truncate destination files until just prior to writing.
  - Add test for file replacement
  - Use int type for POPT_ARG_NONE values to fix a bug on s390x


author: Sandipan Roy <saroy@redhat.com> - 2.2.0-1
changelog:
  - Update to sslscan 2.2.0
  - Bump bundled OpenSSL to 3.5.0 (minimum supported upstream)
  - Fixes rhbz#2330567


author: Clark Williams <williams@redhat.com> - 1.21.2-1
changelog:
  - Makefile: bump version to v1.20.1
  - bpf: Improve task tracking in sched_switch
  - bpf/stalld: Introduce compute_ctxswc helper and update ctxswc on sched_switch


author: Clark Williams <williams@redhat.com> - 1.21.1-1
changelog:
  - refactor: Remove unused 'exiting' variable
  - bpf: Introduce task_is_rt() helper
  - bpf: Correctly update nr_rt_running on sched_switch
  - Simplify __die() function to use abort()
  - Refactor: Use path length macros in check_dl_server_dir_exists
  - Refactor: Remove duplicated find_debugfs function
  - utils: Remove unused find_mount() function
  - bpf: Reorder functions to prepare for future changes
  - bpf: Pass stalld_cpu_data pointer to queuing functions
  - bpf: Make update_or_add_task() return void
  - bpf: Reuse enqueue_task() in update_or_add_task()
  - bpf: Use tracepoints to avoid fentry startup stall
  - bpf: Centralize monitoring check in get_cpu_data()
  - bpf: Remove unused 'task' variable
  - bpf: Use task_cpu() to get the correct CPU data
  - bpf: Handle wakeup of new tasks with sched_wakeup_new
  - daemon: Refactor cleanup logic into a helper function
  - daemon: Clean up stale tasks during the boost phase
  - bpf: Document and enhance dequeue_task return value
  - bpf: Handle task migrations with sched_migrate_task
  - bpf: a task is dequeued just by setting its pid to 0
  - bpf: Improve logging in stalld.bpf.c
  - bpf: Use BPF CO-RE for task CPU field access
  - bpf: Add const qualifier to task_struct pointers
  - bpf: Add task iterator for initial state snapshot
  - bpf: Simplify task queue management by removing redundant rt parameter
  - bpf: Add cpu to log_task_prefix
  - stalld: Refactor tgid_field handling to use sizeof
  - refactor: Move helper functions to utils.c
  - stalld: Simplify get_cpu_idle_time() function using sscanf
  - refactor: Simplify update_cpu_starving_vector()
  - refactor: Remove unused headers from stalld.c
  - stalld: Extract repeated buffer reallocation pattern
  - stalld: Flatten nested conditionals using early returns
  - refactor: Extract common idle detection pattern into helper function
  - refactor: Standardize memory allocation with calloc-compatible helper
  - bpf: Use CO-RE to check for running tasks
  - systemd:  change systemd service startup to use RuntimeDirectory
  - Makefile: version bump to v1.21.1


author: Clark Williams <williams@redhat.com> - 1.22.1-1
changelog:
  - bpf: Reduce arguments to log() to fix verifier error
  - stalld: Always reset starving vector in merge_taks_info
  - stalld: Remove forced log-only mode with DL-server
  - Makefile: version bump to v1.22.1


author: Clark Williams <williams@redhat.com> - 1.24.1-1
changelog:
  - sched_debug: Unify parsing methods for task_info
  - sched_debug: Fix runqueue task parsing logic and state filtering
  - sched_debug: Fix double-free crash in fill_waiting_task()
  - stalld.c: remove noisy idle report and added report to should_skip_idle_cpus()
  - stalld.c: initialize cpu_info->idle_time to be -1
  - stalld.c: get rid of misleading print about DL-Server
  - stalld.c: Add starvation logging in single-threaded log-only mode
  - stalld: Add -N/--no_idle_detect flag to disable idle detection
  - stalld: Add defensive checks in print_boosted_info
  - Makefile: Add support for legacy kernels
  - scripts: fix run-local if bashism
  - sched_debug: Fix segfault in adaptive/aggressive modes
  - Makefile: Remove redhat-specific checks
  - Makefile: Add a help target
  - Makefile: Check compatible compiler versions
  - stalld.c: Ensure queue_track backend is not referenced when USE_BPF=0
  - Makefile: version bump to v1.24.1


author: Clark Williams <williams@redhat.com> - 1.25.1-1
changelog:
  - docs: add CLAUDE.md, .claude agents, and update .gitignore
  - tests: Add comprehensive test suite with infrastructure and functional tests
  - tests: Add Phase 2 command-line option tests (8 new tests)
  - docs: Add project rules and agent usage guidelines
  - docs: Update context snapshot with Phase 2 completion
  - tests: Add Phase 3.1 core logic tests (starvation detection and parsing)
  - tests: Add Phase 3.2 boosting mechanism tests (DEADLINE, FIFO, restoration)
  - tests: Add Phase 3.3 task merging and idle detection tests - Phase 3 COMPLETE
  - tests: Add RT throttling save/restore helpers
  - tests: Automatically save and restore RT throttling state
  - tests: Fix test_task_merging empty variable errors and add DL-server check
  - tests: Add DL-server save/disable/restore support
  - docs: Update TODO.md with DL-server management and recent improvements
  - docs: Update context snapshot with Phase 3 completion and state management
  - tests: Add legacy test integration and backend selection support
  - test01: add ability to specify backend
  - tests: remove binary accidentally committed
  - tests: Fix cleanup EXIT trap to preserve test exit codes
  - tests: Fix test_log_only.sh timing and starvation reliability
  - tests: Add backend selection support to individual tests
  - saved claude context snapshot and moved CLAUDE.md to .claude dir
  - .claude: Add context-snapshot.json and update CLAUDE.md
  - tests: Fix starvation_gen to create actual RT starvation
  - tests: Fix test_starvation_detection.sh to respect backend selection
  - tests: Fix test_starvation_detection.sh timing and idle detection issues
  - tests: Fix EPERM errors in cleanup by improving process termination handling
  - docs: Update CLAUDE.md with backend selection and debugfs/procfs clarification
  - tests: Fix infinite hang in test_starvation_detection.sh Test 5
  - tests: Rewrite test_cpu_selection.sh to use modern test framework
  - tests: Rewrite test_boost_period.sh to fix hanging issues
  - tests: Fix PID tracking and backgrounding issues in test suite
  - tests: Rewrite test_starvation_threshold.sh to fix undefined variables
  - tests: Fix test_starvation_threshold.sh log file collision issue
  - tests: Update TODO.md with 2025-10-09 progress and old-style test issues
  - tests: Update context snapshot for 2025-10-09 test framework hardening session
  - tests: Rewrite all remaining old-style Phase 2 tests using modern framework
  - tests: Fix EPERM errors in test cleanup by replacing wait with polling
  - tests: Fix Phase 1 test issues (affinity, backend_selection, fifo_boosting)
  - tests: Add -N flag to disable idle detection in starvation/FIFO tests
  - tests: Fix argument ordering in backend selection tests
  - tests: Fix hanging issues in test_boost_duration.sh
  - tests: Fix test_boost_runtime.sh hanging and improve reliability
  - save LLM context
  - add helpers for git-scm-master AI agent
  - tests: Fix output redirection issues in test_affinity.sh
  - test: Fix test_pidfile.sh output handling and CLI options
  - tests: Fix test_boost_period.sh helper integration and reliability
  - test: Fix test_boost_restoration.sh for stability and standard infrastructure
  - docs: Document mass test suite fixes session with 7 tests and 4 critical discoveries
  - tests: Fix grep pattern in test_starvation_threshold.sh for actual log format
  - docs: Update context snapshot for queue_track backend test fixes
  - tests: Implement matrix testing for backends and threading modes
  - docs: Update CLAUDE.md with correct threading mode flags and matrix testing
  - context: Document matrix testing infrastructure implementation
  - tests: Add timeout protection to test01_wrapper.sh
  - Document queue_track backend limitation in test_starvation_threshold.sh
  - docs: Update documentation with segfault fix and queue_track limitation
  - tests: Add FIFO-on-FIFO priority starvation test
  - tests: Enhance starvation_gen and fix test infrastructure
  - .claude: Update context snapshot
  - .claude: Update context snapshot - BPF RT task tracking fix completed
  - tests: Change starvation_gen default work_target to 1
  - .claude: Update context snapshot - 14/16 tests passing with queue_track
  - tests: Improve starvation_gen thread coordination and shutdown
  - .claude: Update context snapshot - starvation_gen improvements and test progress
  - tests: Add --test option to run individual tests by name
  - .claude: Update context snapshot - test infrastructure improvements complete
  - tests: Fix test_boost_restoration to properly test SCHED_FIFO restoration
  - tests: Add SCHED_OTHER option to starvation_gen
  - tests: Update test_boost_restoration Test 3 to use SCHED_OTHER
  - context snapshot
  - tests: Add kworker denylist to test_boost_restoration
  - tests: Fix Test 5 timing and parameter validation
  - tests: Add journal logging for test activity correlation
  - context snapshot
  - tests: Increase test01 timeout and document kworker competition
  - context snapshot
  - tests: Add unified test environment management framework
  - context snapshot
  - tests: Fix timing race conditions in starvation detection tests
  - docs: Update TODO.md with test suite timing race condition fixes
  - docs: Add context snapshot for test suite timing race fixes
  - tests: Fix timing race conditions in starvation detection tests
  - tests: Fix timing race conditions in test_deadline_boosting
  - tests: Fix timing race conditions in 4 remaining functional tests
  - tests: Fix output buffering and kernel worker interference
  - tests: Fix output buffering in test_starvation_detection Test 3
  - docs: Context snapshot for Nov 3 evening session - timing fixes and buffering issues
  - tests: Fix test_starvation_detection Test 3 flawed counting logic
  - tests: Consolidate duplicate helper functions (Part 1 complete)
  - context snapshot
  - bpf: Add BPF CO-RE compatibility for older kernels
  - Makefile: Make BPF compilation verbose
  - Makefile: Append -std=c99 to CFLAGS
  - doc: update Releases.md for repository instructions
  - tests: Fix start_stalld() PID detection for daemon and slow architectures
  - doc: Release notes for v1.25.1 release
  - Makefile: version bump to v1.25.1


author: Clark Williams <williams@redhat.com> - 1.26.3-1
changelog:
  - tests: Add pre-test and post-test cleanup of stalld processes
  - Makefile: version bump to v1.26.3
  - Makefile: Remove unnecessary -m64 compiler flag
  - Makefile: version bump to v1.26.2
  - Makefile: Remove LTO flags from build options
  - Makefile: switch to using gzip for tarball compression
  - Makefile: version bump to v1.26.1
  - Makefile: Add support for riscv64
  - Fix typo: rename 'merge_taks_info' to 'merge_tasks_info'
  - gitignore: Exclude Serena and Claude Code metadata
  - Makefile: Print BPF tool versions for debugging
  - Makefile: Remove redundant GCC version check
  - Makefile: Explicitly run the 'test' target in the tests directory
  - Makefile: Improve compiler flag detection for -fcf-protection
  - Makefile: Conditionally add -mno-omit-leaf-frame-pointer


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251025gitf1c79c0-2
changelog:
  - Patch two newly-reported memory-safety bugs in stb_image
  - https://github.com/nothings/stb/issues/1860
  - https://github.com/nothings/stb/issues/1861


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20260313git904aa67-2
changelog:
  - Fix access/use of uninitialized memory in stb_image
  - This was undefined behavior, and could leak security-relevant information
    from other data structures. See
    https://github.com/nothings/stb/issues/1929.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.5.5-5
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Fixes RHBZ#2449690
  - Updated the License expression and wrote it one-term-per-line


author: Benjamin A. Beasley <code@musicinmybrain.net> - 17.1-1
changelog:
  - Update to 17.1 (close RHBZ#2356072)
  - The ppc64le version of Stockfish now uses VSX extensions (POWER8)


author: Hans de Goede <johannes.goede@oss.qualcomm.com> - 0.0~20251118gitb5e720e-1
changelog:
  - Move the git snapshot date + hash to the version field
  - Use %undefine _auto_set_build_flags, %make_build, %make_install
  - Add trailing slash after stubble directory listings in %files


author: Attila Kovacs <attipaci@gmail.com> - 1.5.0-1
changelog:
  - Upstream v1.5.0, and streamlined package structure - Switched to CMake
    for the build - devel sub-package now includes CMake / pkgconfig
    configurations - No longer includes cio-data subpackage (no longer needed
    or used) - No longer includes legacy solsys1 / solsys2 ubpackages


author: Xavier Bachelot <xavier@bachelot.org> 6.2.72-5
changelog:
  - Drop EL7 support
  - Fix filter ordering
  - Fix httpd config needed after httpd fix for CVE-2024-38477 (RHBZ#2307179)


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 258.2-1
changelog:
  - Version 258.2
  - A bunch of fixes in many components.
  - Stop creating user namespace for system services (rhbz#2391343)
  - Systemd trigger scriptlets are updated


author: Zbigniew Jędrzejewski-Szmek <zbyszek@amutable.com> - 258.6-1
changelog:
  - Version 258.6
  - A bunch of bugfixes
  - More sanitization for invalid values received from hardware and firmware


author: Frank Ch. Eigler <fche@redhat.com> - 5.4-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Dominik Mierzejewski <dominik@greysector.net> - 0.99.5-1
changelog:
  - update to 0.99.5
  - avoid using obsolete patchN macro
  - rebase patches and drop unused hunks
  - enumerate licenses and update License: tag
  - use package names instead of file references in BuildRequires


author: Ankur Sinha (Ankur Sinha Gmail) <sanjay.ankur@gmail.com> - 3.4.2-2
changelog:
  - fix: regenerate with updated vendored crates (fixes rh#2438090,
    rh#2438156 rh#2444169, rh#2444179, rh#2444189)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.11.0-86
changelog:
  - Update License expression
  - LicenseRef-Fedora-Temporary-Simple-Library-exception was assigned SPDX
    identifier Simple-Library-Usage-exception


author: Dominik Mierzejewski <dominik@greysector.net> - 5.3-1
changelog:
  - Updated to 5.3 (resolves rhbz#2419684)
  - drop obsolete patch
  - backport fix for compiler warning about setjmp
  - make file lists more explicit
  - use modern make macros


author: Jan Grulich <jgrulich@redhat.com> - 1.16.2-2
changelog:
  - Fixes CVEs: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                CVE-2026-34002, CVE-2026-34003


author: Dominik Mierzejewski <dominik@greysector.net> 2.6.3-4
changelog:
  - enable long article number support
  - drop obsolete/redundant configure options
  - switch to package names in BuildRequires and sort alphabetically
  - use modern macros and drop __foo macro usage
  - more explicit file list to avoid duplicates
  - add missing files


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.2-7
changelog:
  - Backport upstream CVE fixes
  - Fixes CVE-2026-3945
  - Fixes CVE-2026-31842
  - Run upstream test suite


author: Tom Callaway <spot@fedoraproject.org> - 2.1.0-1
changelog:
  - update to 2.1.0
  - update the bundled copy of libpng to 1.6.53
  - update the bundled copy of libtiff to 4.7.1
  - build for tcl/tk 9


author: Alessio <alciregi_AT_fedoraproject.org> - 0.48.1-2
changelog:
  - Changed pyproject.toml in order to allow urwid > 2 urwid 3 specifically,
    the version in rawhide. Now toot is installable in F43. Btw the tui
    interface doesn't work.


author: Marcel Härry <mh+fedora@scrit.ch>- 0.4.8.21-2
changelog:
  - Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
  - Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.5-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
  - Enable seccomp on aarch64, which is now supported


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.6-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-23-and-0-4-9-6/21386


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-1
changelog:
  - Bump to v1.0.2
  - Update license
  - Add svg icon
  - Use appstream id for icons, desltop and metainfo files


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-2
changelog:
  - Add patch to fix epel building
  - Drop Qt4 support
  - Update description
  - Use specific macros for metainfo dir


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.6.0-4
changelog:
  - Modernize spec
  - Use libayatana-appindicator instead of libappindicator
  - Convert dependencies to pkgconfig syntax
  - Fix dependencies wrt git and pod2man
  - Convert license to SPDX
  - Implement desktop-file and appstream validations


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
      resolves: RHEL-94842
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
      resolves: RHEL-88238
    - functions: silenced errors if module kvm_intel does not exist
      resolves: RHEL-79943
    - functions: make calc_isolated_cores return CPU ranges
      resolves: RHEL-75751
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
      resolves: RHEL-79913
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
      resolves: RHEL-61801
    - realtime: Disable appropriate P-State drivers
      resolves: RHEL-85637
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
      resolves: RHEL-97087
    - udev-settle: obey udev buffer size and handle possible tracebacks
      resolves: RHEL-92637
    - daemon: re-raise daemon init exception in no-daemon mode
      resolves: RHEL-71304
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
      resolves: RHEL-101578
    - gui: fix the profile deleter script


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.27.0-0.1.rc1
changelog:
  - new release
    - cpu-partitioning: autodetect dracut hook directory, systemd workaround
      resolves: RHEL-40619
    - openshift: optimize TCP settings for high throughput and low latency
    - profiles: Set boost=1 in *-performance profiles
    - sap-hana: force latency to 70 us, not to C-states
      resolves: RHEL-142285
    - man: fixed instance_acquire_devices example in tuned-adm man
      resolves: RHEL-90575
    - spec: use correct python interpreter for documentation installation
    - sysctl: add reapply_sysctl_exclude option
    - ppd: ask tuned recommend for base profile


author: Patsy Griffin <patsy@redhat.com> - 2024a-8
changelog:
  - zic now defaults to "-b slim" to control data bloat.
    For now, build with ZFLAGS="-b fat" for backward compatibitliy.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b (#2310315)
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <patsy@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (#2338511)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  Update to tzdata-2025b (#2354293)
    - Chile's Aysén Region moves from -04/-03 to -03 year-round,
      diverging from America/Santiago and creating a new zone
      America/Coyhaique.


author: Packit <hello@packit.dev> - 0.18.4-1
changelog:
  - Add ioctls for Chromium OS EC devices (thanks Abhinav Baid)
  - Generate "remove" uevent in umockdev_testbed_remove_device() (thanks Bob Henz)
  - Recursively remove children with uevents (thanks Bob Henz)
  - preload: Fix sigmask block and restore race (thanks barath)


author: Packit <hello@packit.dev> - 0.19.0-1
changelog:
  - API: Add UMockdev.Testbed.wait_script() to sync to scripts/evemu replays
  - API: UMockdev.Testbed.load_script_from_string()
  - API: UMockdev.Testbed.load_evemu_events_from_string()
  - Make uevent synthesis thread-safe (thanks Bob Henz)
  - Handle "connection refused" when sending a uevent (thanks Bob Henz)


author: Packit <hello@packit.dev> - 0.19.1-1
changelog:
  - preload: Restore errno in ioctl_emulate_open()
  - preload: Only emulate ioctls on emulated devices
  - Fix ioctl_tree_execute() ret type and initialization (thanks Helge Deller)
  - tests: Disable spidev on big-endian 32-bit platforms (thanks Helge Deller)


author: Packit <hello@packit.dev> - 0.19.4-1
changelog:
  - preload: Hide sticky bit from emulated block dev stat
  - preload: Wrap listxattr()
  - uevent-sender: Retry udev_device_new_from_syspath() on failure
  - uevent_sender: Retry sendmsg() on EAGAIN
  - tests: Adjust for evtest 1.36


author: Packit <hello@packit.dev> - 0.19.5-1
changelog:
  - ioctl: Forward standard termios calls to real pty (fixes tests with Rust coreutils)
  - ioctl: Implement POSIX-compliant errno handling


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-5
changelog:
  - Fix usbguard-tmpfiles.conf
  - Remove catch1 dependency
  - Adapt for protobuf api changes
  - Fix regression in specifying IPC privileges using UID
  - selinux subpackage update: unified bin and sbin
  Resolves: rhbz#2297169


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - Drop patches merged upstream: tmpfiles-v1, tmpfiles-v2,
    uninstall-ignore-error, ipc-privileges, protobuf-3.0,
    catch2-support, disable-catch
  - Add SELinux policy fix for systemd-homed stream connect
    Resolves: rhbz#2380396
    Resolves: rhbz#2376283


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-0.1.RC1
changelog:
  - Upstream 3.26.0-RC1
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-2
changelog:
  - Add VALGRIND_3_26_BRANCH patches
      - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
      - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
      - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
      - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
      - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
      - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-4
changelog:
  - Add more VALGRIND_3_26_BRANCH patches
      - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch
      - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch


author: Remi Collet <remi@fedoraproject.org> - 8.1.3-3
changelog:
  - use patch for configuration changes
  - add /etc/valkey/modules drop-in directory for module configuration files
  - add %valkey_version and %valkey_modules_cfg macros


author: Remi Collet <remi@fedoraproject.org> - 8.1.4-1
changelog:
  - Valkey 8.1.4 - Released Fri 09 October 2025
  - Upgrade urgency SECURITY:
    CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819
  - fix CONFIG REWRITE breaks configuration
    reported as https://github.com/valkey-io/valkey/issues/2678
    using patch from https://github.com/valkey-io/valkey/pull/2689


author: Remi Collet <remi@fedoraproject.org> - 8.1.6-1
changelog:
  - Valkey 8.1.6 - Released Mon 23 February 2026
  - Upgrade urgency SECURITY: This release includes security fixes


author: Remi Collet <remi@remirepo.net> - 8.1.7-1
changelog:
  - Valkey 8.1.7 - Tue 05 May 2026
  - Upgrade urgency SECURITY: This release includes security fixes.
    CVE-2026-23479 CVE-2026-25243 CVE-2026-23631


author: Martin Gansser <martinkg@fedoraproject.org> - 0.9.0-0.1.beta1
changelog:
  - Update to 0.9.0-0.1.beta1
  - Add python3dist(setuptools-gettext)
  - Fixed icon installation
  - Fixed desktop validation
  - Fixed setuptools discovery warnings


author: Pavel Raiskup <praiskup@redhat.com> - 5-1
changelog:
  - support for fast "ruff" analyser
  - --linter-tag option added
  - subproject detection by .vcs-diff-lint.yml


author: Pavel Raiskup <praiskup@redhat.com> 6-1
changelog:
  - bugfix: correctly honor file renames
  - bugfix: fix subproject detection for git worktree
  - ruff: do full project scans (since Ruff is fast enough)
  - check the new (changed) code in a side-directory


author: Pavel Raiskup <praiskup@redhat.com> 6.2-1
changelog:
  - drop unnecessary newline in the output
  - ruff: don't prefix the error locations with absolute path
  - ruff: don't optimize out the full Ruff run
  - print the git sha1 being analyzed
  - bugfix: correct matching filenames with endswith()


author: Pavel Raiskup <praiskup@redhat.com> 6.3-1
changelog:
  - don't require all the linters, just recommend them
  - use requested linters only if they are available
  - nicer info/debug output


author: Pavel Raiskup <pavel@raiskup.cz> 6.7-1
changelog:
  - Handle (no traceback) "invalid-syntax" code from Ruff
  - log.debug() all git commands
  - do not let "git apply" pollute stderr with whitespace errors


author: Kleis Auke Wolthuizen <fedora@kleisauke.nl> - 8.17.1-1
changelog:
  - Update to 8.17.1
  - Resolves: rhbz#2351373
  - Migrate API documentation to gi-docgen
  - Drop dependency on python3-cairo (due to vipsprofile removal)


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.9.3-1
changelog:
  - New upstream development version 2.9.3
  - Ensure minimum libguestfs is 1.57.1 (for guestfs_setfiles)


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.9.5-1
changelog:
  - New upstream development version 2.9.5
  - Use new ./configure --disable/--enable flags for excluding RHEL features


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.9.7-1
changelog:
  - New upstream development version 2.9.7
  - Backport non-upstream patch to improve Windows conversions


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.3.5-1
changelog:
  - Update to version 3.3.5
  - Do not run tests
    - some scripts needed for generating the test certificates are missing


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.4-1
changelog:
  - Moved from 3.3.x to 3.5.x
  - License has changed from MPLv2 AND Boost to MPLv2
  - No longer need to carry the big-endian patch
  - Needed to fix some entries which did not include cstdint


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-2
changelog:
  - Try to fix the selinux problem seen with CS10
  - Try to fix problem with socket creation and systemd


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-3
changelog:
  - Rewrite the selinux policy from scratch with sepolgen
  - Remove the socket creation as systemd as vsomeip will not work with it.


author: Alessandro Astone <ales.astone@gmail.com> - 1.6.0-1
changelog:
  - Toggle ADB secure mode by default
    + ADB will no longer auto-connect on session start
    + You may use the new waydroid adb connect command to connect ADB
    + To connect ADB, you will need to provide authorization on the Android side
  - Rotate and trim waydroid.log file at 5MB
  - Hide system apps from the desktop applications menu
    + To make a system app visible in your apps menu, switch NoDisplay=false in its desktop file
  - Do not hide the main Waydroid launcher after enabling multi-windows mode
  - Add desktop action to stop Waydroid session
    + Right-click the Waydroid entry in your desktop application launcher, then Stop Waydroid
  - Add desktop action to re-initialize Waydroid
    + Right-click the Waydroid entry in your desktop application launcher, then Initialize Waydroid
    + This allows switching between VANILLA and GAPPS
  - Make sure to stop waydroid session on user log-out
  - Add new waydroid command with no arguments, alias for waydroid show-full-ui
  - Add new waydroid bugreport command to gather logs for a bug report
  - Forward Android notifications to the desktop
    + Requires updating the Android system image to a compatible version


author: Alessandro Astone <ales.astone@gmail.com> - 1.6.1-1
changelog:
  - Fix graphical initialization with Python 3.14 and newer (rhbz#2425593)
  - Allow using block device as pre-installed image files


author: Alessandro Astone <ales.astone@gmail.com> - 1.6.2-1
changelog:
  - Attempt to further fix initialization with Python 3.14
  - Fix desktop file update logic for headless apps
  - Add Vulkan support for xe kernel driver
  - Allow passing arguments to "waydroid logcat"


author: Dominique Martinet <asmadeus@codewreck.org> - 0.9.0-1
changelog:
  - Update to 0.9.0
  - fix fd leak (probably #2290715)
  - enable lz4 compression by default
  - add supprt for av1 software encoding/decoding
  - add support for vsock transport
  - fix build with gcc-14


author: Dominique Martinet <asmadeus@codewreck.org> - 0.9.1-1
changelog:
  - Update to 0.9.1
  - don't abort on double-^C (#2262447)
  - fix for compositors using drm_syncobj protocol


author: Germano Massullo <germano.massullo@gmail.com> - 2.6.0-1
changelog:
  - 2.6.0 release
  - Removed %define debug_package %{nil}
  - Added -DCMAKE_INSTALL_SYSCONFDIR=%{_sysconfdir}
  - Modified %files section


author: Brian C. Lane <bcl@redhat.com> - 36.1-1
changelog:
  - New release: 36.1 (bcl)
  - build(deps): bump actions/setup-go from 5 to 6 (49699333+dependabot[bot])
  - build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 (49699333+dependabot[bot])
  - test: iot-qcow2-image does not support packages (bcl)
  - test: qcow2 renamed to server-qcow2 (bcl)
  - build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (49699333+dependabot[bot])
  - build(deps): bump actions/checkout from 4 to 5 (49699333+dependabot[bot])
  - tests: Use current host arch in info and list tests (bcl)


author: Romain Geissler <romain.geissler@amadeus.com> - 2.1.0-10
changelog:
  - Disable explicit OCSP requests by default for privacy reasons.
  - Accept --progress=dot:... for backwards compatibility.


author: Michal Ruprich <mruprich@redhat.com> - 2.2.0-1
changelog:
  - New version 2.2.0
  - Resolves: rhbz#2298879 - Using options -nc and -O simultaneously causes existing files to be clobbered/truncated
  - Resolves: rhbz#2327788 - wget starts using non-working IPv6 addresses on dual stack
  - Resolves: rhbz#2327728 - Crash: "free(): double free detected in tcache 2" when using --load-cookies
  - Resolves: rhbz#2280151 - wget2 always re-downdloads when using custom output filename


author: Sudip Shil <sshil@redhat.com> - 2.1.0-0
changelog:
  - Added --language (-l) CLI option to detect the default font for a given language code, which detects and prints the default font family that supports the specified language.
  - Introduced valid_langs[] array containing known language codes supported by fontconfig, Rejects invalid language codes early with a clear error message.
  - Checks not only if a font is returned, but whether it actually supports the given language.
  - Updated --help output to include usage for --language option.
  - updated readme with installation, build section.


author: Sudip Shil <sshil@redhat.com> - 2.2.0-1
changelog:
  - Modified input_char to handle multiple words as a single input string, allowing space-separated characters.
  - :: as the delimiter for Fontconfig parameters.
  - help section in better format
  - Modified tests.sh to include new test cases for space-separated inputs and :: parameter handling.


author: Sudip Shil <sshil@redhat.com> - 2.3.0-1
changelog:
  - Improve input handling for -f option and Update test cases in to cover new scenarios and edge cases.
  - now tests.sh can capture segmentation fault and save in test_error txt file
  - Created github workflow action tests.yml in github - if test fails then it is usefull for CI and automation.


author: Sudip Shil <sshil@redhat.com> - 3.0.0-1
changelog:
  - resolve snowflake emoji incorrectly defaulting to Symbola
  - emoji detection for BMP ranges and remove redundant logic
  - Integrate Pango API to segment and find fonts and refine hex detection logics
  - Fix Pango sans-serif fallback and --language feature not giving output fixed
  - Fix CI build by adding missing GLib and Pango dependencies


author: Peter Hanecak <hany@hany.sk> - 1.2.1-1
changelog:
  - New upstream release 1.2 (rhbz#2322776)
  - Generate font file symlinks also for DejaVuSansCondensed (rhbz#2334803)


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.1-5
changelog:
  - Mutiple vulnerabilities in the Viridian interface [XSA-472,
  	CVE-2025-27466, CVE-2025-58142, CVE-2025-58143]
  - Arm issues with page refcounting [XSA-473, CVE-2025-58144,
  	CVE-2025-58145]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.1-7
changelog:
  - x86: Incorrect input sanitisation in Viridian hypercalls [XSA-475,
  	CVE-2025-58147, CVE-2025-58148]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.2-3
changelog:
  x86: buffer overrun with shadow paging + tracing [XSA-477, CVE-2025-58150]
  	(#2434046)
    x86: incomplete IBPB for vCPU isolation [XSA-479, CVE-2026-23553]
  	(#2434048)


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.2-4
changelog:
  - Use after free of paging structures in EPT [XSA-480, CVE-2026-23554]
  - Xenstored DoS by unprivileged domain [XSA-481, CVE-2026-23555]


author: Michael Young <m.a.young@durham.ac.uk> - 4.20.3-2
changelog:
  - oxenstored keeps quota related use counts across domain destruction
          [XSA-483, CVE-2026-23556]
  - Xenstored DoS via XS_RESET_WATCHES command [XSA-484, CVE-2026-23557]
  - grant table v2 race in status page mapping [XSA-486, CVE-2026-23558]
  - x86: Floating Point Divider State Sampling [XSA-488, CVE-2025-54505]


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.1.2-2
changelog:
  - Workaround for use-after-free when trying to repaint window after opening
    supprted file (bug 2425678)


author: Peter Hutterer <peter.hutterer@redhat.com> - 2.45-1
changelog:
  - xkeyboard-config 2.45
    xkeyboard-config changed from /usr/share/X11/xkb to /usr/share/xkeyboard-config-2/,
    with the same contents and the old location symlinked to the new one.
    Add a pretrans script to move the old location to the new one to stick with the
    upstream packaging approach.


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.16-1
changelog:
  - Update to xserver 21.1.16 (#2347558)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.17-1
changelog:
  - Update to xserver 21.1.17
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.20-1
changelog:
  - Update to xserver 21.1.20 (#2406803)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.22-1
changelog:
  - Update to xserver 21.1.22
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.6-1
changelog:
  - xwayland 24.1.6 (#2343992)
  - CVE fix for: CVE-2025-26594, CVE-2025-26595, CVE-2025-26596, CVE-2025-26597,
                 CVE-2025-26598, CVE-2025-26599, CVE-2025-26600, CVE-2025-26601


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.7-1
changelog:
  - Update to xserver 24.1.7
  - CVE fix for: CVE-2025-49175, CVE-2025-49176, CVE-2025-49177
                 CVE-2025-49178, CVE-2025-49179, CVE-2025-49180


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.9-1
changelog:
  - Update to xwayland 24.1.9 (#2406802)
  - CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.10-1
changelog:
  - Update to xwayland 24.1.10
  - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001,
                 CVE-2026-34002, CVE-2026-34003


author: Göran Uddeborg <goeran@uddeborg.se> - 3.2.3-1
changelog:
  - Upgrade to version 3.2.3
  - This version shows the penguins also on modern desktops
  - Wayland windows are invisible for them, though


author: Bojan Smojver <bojan@rexursive.com> - 1:0.10.6-1
changelog:
  - Update to 0.10.6
  - CVE-2026-32105, CVE-2026-32107, CVE-2026-32623, CVE-2026-32624
  - CVE-2026-33145, CVE-2026-33516, CVE-2026-33689, CVE-2026-35512


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.10-1
changelog:
  - update to 1.10 fixes rhbz#2464731 - fix license GPL-3.0-only - updated /
    reorganize BuildRequires list


author: Richard W.M. Jones <rjones@redhat.com> - 1:5.6.3-2
changelog:
  - perl-Compress-Raw-Lzma dep has been removed, rebuild
    https://src.fedoraproject.org/rpms/perl-Compress-Raw-Lzma/pull-request/3


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-9
changelog:
  - Add CVE-2025-6545_6547.prebundle.patch and regenerate bundle. Fixes CVE-2025-6545 and CVE-2025-6547.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-11
changelog:
  - Refresh bundle
  - Drop patches obsoleted by new bundle
  - Add yarn-update-jest.prebundle.patch to update jest and avoid some vulerable dependencies
  - Apply fixes for CVE-2025-8262 and CVE-2025-8263


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-12
changelog:
  - Regenerate bundle, fixes CVE-2025-59343
  - Patch out eslint and commitizen devDependencies to reduce dependencies


author: Maxwell G <maxwell@gtmx.me> - 2025.12.08-2
changelog:
  - Exclude optional yt-dlp-ejs dependency. Users need to handle it manually.
  - https://github.com/yt-dlp/yt-dlp/wiki/EJS
  - Remove python -s shebang flag so users can install yt-dlp-ejs or other
    optional deps or plugins using pip


author: Maxwell G <maxwell@gtmx.me> - 2026.02.21-1
changelog:
  - Update to 2026.02.21. Fixes rhbz#2441709.
  - Mitigates CVE-2026-26331 / GHSA-g3gw-q23r-pgqm (rhbz#2442244)


author: Michel Lind <salimma@fedoraproject.org> - 0.8.0-1
changelog:
  - Update to 0.8.0 upstream release
  - Resolves: rhbz#2443508
  - Re-enable debuginfo generation
  - Enable Packit
  - Verified the SPDX license conversion


author: Jean-Baptiste Trystram <jbtrystram@redhat.com> - 0.0.30-3
changelog:
  - Backport patch to fix rollback not sticking from https://github.com/coreos/zincati/pull/1293
    See https://github.com/coreos/fedora-coreos-tracker/issues/1938


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.0.3-12
changelog:
  - Fix FTBFS. Thanks @limb for the hotfix.
  - Upstream work ongoing for improved support with newer versions of the C programming language and compilers.


